Regarding Security Software False Positive

Problem Description

After downloading WSL Dashboard's .exe installer or .zip archive, Windows Defender or other antivirus software may display a security warning indicating the file poses a risk, or directly block and delete it.

Why Does This Happen?

This is a false positive — the file does not actually contain any virus.

The root cause is: this project does not have an EV (Extended Validation) code signing certificate.

What Is a Code Signing Certificate?

A code signing certificate is used to digitally sign executable files, proving they come from a trusted publisher and have not been tampered with. Windows applies stricter security checks to unsigned programs or those signed with standard certificates.

Differences Between Certificate Types

Certificate Type	Price	SmartScreen Policy
No signature	Free	Blocked immediately, marked as "Unknown Publisher"
Standard OV certificate	Hundreds of dollars/year	Still shows warnings, requires reputation building
EV certificate	Thousands of dollars/year	Passes immediately, no warnings

Programs not signed with an EV certificate are marked as unsafe by default by Windows SmartScreen, and are more likely to be identified as potential threats by antivirus software.

About File Safety

Rest assured, the build process for this project is completely transparent and auditable:

1. Open source code: All source code is hosted on GitHub and can be reviewed by anyone
2. Automated builds: The exe file is automatically built by GitHub Actions workflows on GitHub's servers, with no human intervention throughout the process
3. Traceable builds: Every build has complete logs that can be viewed on the GitHub Actions page
4. Zero-touch release: Developers cannot insert any malicious code during the build process — the entire flow from build completion to release download is fully automated

In simple terms: the exe file never passes through the developer's hands — there is no possibility of "poisoning".

Solutions

Option 1: Add to Trust Whitelist (Recommended for Regular Users)

When Windows Defender blocks the file:

1. Open "Windows Security" → "Virus & threat protection"
2. Click "Protection history"
3. Find the blocked item, click "Actions" → "Allow"

Or add an exclusion before downloading:

1. Open "Windows Security" → "Virus & threat protection" → "Manage settings"
2. Scroll down to find "Exclusions", click "Add or remove exclusions"
3. Add your download directory as an exclusion

Third-party antivirus software: Please add the downloaded file or directory to the trust list in the respective software.

Option 2: Build from Source (Recommended for Developers)

If you still have concerns about pre-compiled binaries, you can clone the source code and compile it locally:

# Clone the repository
git clone https://github.com/owu/wsl-dashboard.git
cd wsl-dashboard

# Build Release version
cargo build --release

# Build artifacts are located in the target/release/ directory

This way, you can fully verify the code you are running.

Option 3: Purchase an EV Certificate (Note for Developers)

Purchasing an EV code signing certificate can fundamentally solve the false positive issue, but faces the following practical challenges:

• High cost: EV certificates cost thousands of dollars per year
• Ongoing expenses: Certificates require annual renewal, creating a long-term financial burden
• Project nature: WSL Dashboard is a non-profit open source project that cannot easily bear this expense

If you would like to support the development of this project, you can donate through the sponsorship channels on the project homepage to help the developer cover operational costs such as certificates.

Summary

• Files are blocked due to the lack of an EV code signing certificate — they are not viruses
• All build artifacts are automatically generated by GitHub Actions — the process is transparent and auditable
• Users can resolve this issue by adding the file to a whitelist or compiling from source
• Purchasing an EV certificate can fundamentally solve the problem, but poses financial challenges for non-profit projects

Thank you for your understanding and support!